Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/IjxHTZCreyDc6csZL7ds5BEDMlI.roa
File: IjxHTZCreyDc6csZL7ds5BEDMlI.roa (raw, json)
Hash identifier: 8ICIGPUgNLulDkRenOqCLyRX2X0VOBveyPRhWy0xOaI=
Subject key identifier: 22:3C:47:4D:90:AB:7B:20:DC:E9:CB:19:2F:B7:6C:E4:11:03:32:52
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 01A0C4A2A0F65C674F41DB254039D7CCF817
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/IjxHTZCreyDc6csZL7ds5BEDMlI.roa
Signing time: Mon 21 Sep 2026 15:43:07 +0000
ROA not before: Mon 21 Sep 2026 15:43:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218644
IP address blocks: 222.167.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:a2:a0:f6:5c:67:4f:41:db:25:40:39:d7:cc:f8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Sep 21 15:43:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=223c474d90ab7b20dce9cb192fb76ce411033252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:51:f5:28:fe:05:ea:ab:b3:c6:8e:b8:19:
9a:aa:4a:5d:76:a2:19:66:d3:98:17:5b:80:0d:6b:
2a:c4:19:e6:df:dc:03:f0:fa:a5:b6:c8:99:53:77:
80:26:42:9d:61:5c:4c:7c:78:52:31:74:25:ca:64:
be:f7:58:83:1a:7d:6a:fe:7b:67:1b:e4:35:4e:52:
28:6e:dc:dd:9a:82:c2:60:4c:ef:73:16:e8:5f:b1:
b0:98:69:9d:74:a9:8c:ea:1b:9b:86:7c:c4:99:2e:
01:3e:a4:29:e7:c1:87:bd:94:3b:94:2a:77:b1:ab:
dc:31:dc:48:46:7e:5e:91:6d:f2:8a:f3:5b:ce:be:
29:6b:67:e6:71:62:fb:81:a9:b0:ba:f3:56:cc:00:
b5:c6:38:b0:14:e6:b7:b8:d0:8e:41:63:50:d5:6f:
8d:be:ab:ea:9e:15:40:6d:fb:d0:6c:a1:bf:79:c4:
65:90:fc:bd:b5:cf:16:83:2b:da:9b:a7:8f:ba:66:
bf:17:28:14:19:4f:b2:58:60:71:26:42:53:b2:a2:
34:77:ca:cb:32:39:03:6f:7b:a9:40:57:7c:e1:ef:
e5:ec:d2:4d:4f:b4:4a:1c:d7:87:68:3e:10:a0:4c:
7d:89:cf:51:d0:70:72:20:b7:04:68:5c:81:f8:95:
d3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3C:47:4D:90:AB:7B:20:DC:E9:CB:19:2F:B7:6C:E4:11:03:32:52
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/IjxHTZCreyDc6csZL7ds5BEDMlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.228.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b4:60:f4:20:27:89:db:d4:85:49:9b:87:47:69:d7:98:70:
0c:18:3a:3c:64:51:82:01:76:5b:04:0b:42:65:2e:30:ec:0b:
b9:54:be:9b:54:6e:90:9e:52:14:58:a3:98:2b:e0:b5:a4:8c:
9e:7b:b0:e8:b7:fc:74:a6:a9:86:91:a1:30:76:4e:15:ad:02:
9d:a2:39:e9:e0:dc:67:6b:6a:22:f7:bd:36:ed:fa:c7:c1:f3:
41:42:c6:c4:f7:d6:2e:7b:65:da:4b:05:2e:b0:49:1d:48:26:
ae:16:21:f0:b9:e2:dc:92:d2:14:8b:a1:48:39:a8:ef:65:ae:
44:21:c0:13:d8:7d:9d:0f:60:ba:55:2a:1d:09:28:19:1c:ae:
44:03:ed:f6:ef:7c:1d:63:11:84:07:ac:f6:fe:2a:64:f9:b4:
0a:60:75:03:ec:a9:56:24:04:8d:77:5e:4d:b7:67:e8:6e:83:
3a:af:54:da:70:e7:6e:c9:3e:e3:16:ba:d6:57:92:de:1c:ef:
69:55:32:22:dd:02:a4:4f:30:83:00:be:01:0d:f4:14:0b:c3:
c9:b0:3e:04:79:48:36:e3:33:c2:fc:04:8e:41:5a:24:bc:56:
82:7c:9e:3f:2d:24:a1:cf:e5:3e:b6:b1:37:fc:8b:67:61:f1:
f7:6f:36:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:35:49 2026 by rpki-client